Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: ALCba4UTuAcgr6zba4fg1GBN9su7ef0jQ/PruGDV0N4=
Subject key identifier: 20:3A:16:8A:48:AF:FB:99:66:91:25:95:7F:7E:B0:D7:E9:30:BD:C6
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 019DB16B6069096E74702AAEC50B2AAB5A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 0D83
Signing time: Tue 21 Apr 2026 19:01:37 +0000
Manifest this update: Tue 21 Apr 2026 19:01:37 +0000
Manifest next update: Wed 22 Apr 2026 19:01:37 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: 8ocwEcq7Uzy717oetsn6hJ4936XcKONodLcaunVEwGc=)
2: 5IiWlb3vHBWlCp6tIVca2yVQHto.roa (hash: STYN3zexlvKSLuiZ3ZMU8hJ7HbklvtNxc22+hhIPD74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:60:69:09:6e:74:70:2a:ae:c5:0b:2a:ab:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Apr 21 19:01:37 2026 GMT
Not After : Apr 22 19:01:37 2026 GMT
Subject: CN=203a168a48affb99669125957f7eb0d7e930bdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:37:9b:81:28:be:d8:e6:d4:15:5d:5d:40:96:
24:01:b6:6f:9c:19:71:dd:0d:50:a1:88:03:6f:c2:
64:e7:94:ff:ed:f5:3b:95:8a:16:7e:24:eb:46:fa:
9f:03:8d:8c:b3:0b:38:60:80:10:74:79:5d:f0:8d:
a0:c2:73:44:e5:e4:5c:8c:74:cd:55:53:94:8b:4b:
55:90:00:08:0d:54:98:90:79:8b:ac:79:bb:43:9a:
0d:b5:65:af:0f:57:f2:fd:88:b4:86:18:a4:af:69:
b2:3d:5d:b4:2a:cf:5f:e5:01:cf:3f:05:52:ea:e9:
63:48:1d:33:34:75:72:ef:08:27:95:04:df:1b:d9:
85:2e:29:0a:b2:a0:c2:80:96:1d:06:f5:17:dc:97:
d7:97:7d:61:dd:46:e9:12:18:d0:5a:9b:77:49:99:
df:c6:95:e0:34:4b:2e:e4:64:d7:64:98:f4:41:8f:
8c:1c:44:b5:e9:54:21:b7:3f:3a:02:50:a3:9d:bf:
07:df:75:1c:c9:81:56:d2:25:c3:e3:b0:e5:eb:3c:
1b:9c:fc:03:86:c9:3c:c1:a8:71:0a:c9:cf:16:54:
14:38:08:74:b1:43:0e:6b:c7:0d:02:9c:8f:7e:88:
9c:59:7c:e6:9b:51:02:c2:64:85:03:39:4f:6a:a8:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3A:16:8A:48:AF:FB:99:66:91:25:95:7F:7E:B0:D7:E9:30:BD:C6
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ce:38:53:4d:55:8c:b3:f3:ba:86:c2:aa:da:82:c7:4d:0e:
8a:1a:ce:d4:79:0b:f7:0a:c5:cb:34:26:d3:eb:3b:af:dc:22:
8d:da:e0:b0:0d:55:12:e2:a0:19:cb:0f:39:de:ce:6c:e8:a8:
dd:87:6d:51:c3:e5:5f:67:67:85:73:24:42:92:cf:25:63:0f:
7e:bd:cb:41:ee:74:ff:cd:f5:eb:a9:5a:81:03:9b:fe:4b:e0:
04:e0:ea:fa:fa:3a:85:b1:57:a2:c8:11:e4:42:ec:26:a0:38:
fc:9e:3c:c9:33:c1:19:b7:3d:3a:1d:9b:3e:64:6d:bf:d9:09:
00:76:ea:57:c0:33:26:e8:c2:a2:90:ca:54:66:d3:d9:31:36:
bb:82:d3:a4:82:b9:b3:06:02:2b:60:6e:bb:a7:0a:14:fc:52:
04:36:72:89:08:7e:ed:ee:34:ab:13:e8:b6:37:a8:13:ff:f0:
f3:8b:13:12:cc:9c:9d:82:ed:12:51:df:0e:1a:83:d5:5b:ff:
67:0b:71:2f:d1:49:ce:3a:ef:94:4c:0c:21:f2:bb:9e:4a:cc:
75:3e:13:de:7f:05:33:47:bd:a7:04:78:09:fa:8d:1f:9a:1d:
7e:4d:fa:c8:2e:8d:0f:8c:2e:b2:1e:93:25:e2:d9:c6:ec:1c:
65:20:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:56:53 2026 by rpki-client